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DETAILED ACTION 

i> This action is in response to Applicant's amendments and arguments, filed on 
10.31.2007. Claims 21, 26, 41 are amended. Claims 21-53 are presented for further examination. 

2> This is a final rejection. 

Response to Arguments 

3> As to the §112 rejections. Applicant has amended the independent claims to now recite 
in part that the display filter is "not subject to editing by the service provider." Applicant 
points to Figure 2, asserting that there is no connection between the edit manager and the 
Filter Library that contains the display filter. Applicant also asserts the specification supports 
the limitation because there is no explicit disclosure that the edit manager edits the "display 
filter." 

Any negative limitation or exclusionary proviso must have basis in the original 
disclosure. MPEP §2i73'Os(i) ' The mere absence of a positive recitation is not basis for an 
exclusion. Id. 

The mere absence of a recitation that the edit manager does not edit the display filter 
is not basis for excluding the feature from the claim. Applicant's reliance on Figure 2 is also 
unpersuasive for several reasons. First, there is nothing in Applicant's specification that 
states that the edit manager must be connected to the filter library in order to be able edit the 
filter. Second, the edit manager is connected to the filter library through the module library. 
Third, following Applicant's logic, it is unclear how a customer would be able to access the 
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filter library and edit any of the filters stored therein. That is, if some component must be 
"connected" to the filter library in order to edit the filters, the figure and Applicant's 
specification fail to describe the needed component that would enable the customer to edit 
the filters. 

Based on the foregoing remarks, the claims remain rejected under §112, first paragraph 
for lacking proper written description. There is no support in Applicant's specification that 
discloses that the service provider cannot edit the customer's display filter. 

4> Applicant's other amendments to the independent claims do not overcome the cited 
prior art references. The amendments recite (i) parsing a user configuration database for a 
security filter stored in a customer configuration record; (2) said security filter definable by 
the service provider in accordance with what the customer is allowed to view; (3) parsing the 
customer configuration record for at least one management information module from a 
module library; and (4) a display filter definable by the customer in accordance with what 
the customer desires to view and not subject to editing by the service provider. The cited 
prior art references, Dobbins, Lim, and Szabo, disclose the new limitations. 

As to (i), Dobbins discloses storing customer data in a database as a configuration 
record within a table structure [Figure 12 : "People" directory name which refers to 
"information about subscribers" | 0007 : database directory data model | 0087]. Dobbins 
further discloses applying a security filter in the form of determining whether the subscriber 
is authorized to access the network [0022]. Once the subscriber is authenticated, subscriber- 
specific policies, definable by the service provider and in accordance with what the subscriber 
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is allowed to view, are applied [0023 | 0024 : policies control subscriber's ability to "gain 
access to specific content and network resources"]. Thus, Dobbins discloses parsing a user 
configuration database (Dobbin's database), for a security filter (authenticating the user and 
applying appropriate policies) stored in a configuration record of the customer (Figure 12). 

As to (2), the security filter was discussed above. To reiterate, Dobbins discloses 
authenticating the user (filtering unauthorized users) and retrieving subscriber-specific 
policies that control the subscriber's ability to access specific content and resources [0024]. 
These policies correspond to Applicant's security filter. 

As to (3), Dobbins discloses parsing the customer's configuration record as discussed 
above. Additionally, Dobbins discloses parsing the record for a management information 
module [Figure 12 : disclosing network management information are stored in the 
configuration record], Dobbins does not expressly disclose a module library. However, 
Dobbins does disclose that a user can select from a variety of available services [0024], some 
of these services including logging, billing and monitoring services [0028]. These services 
correspond to Applicant's modules. Additionally, a new ground of rejection is set forth for 
the claims to address this newly added limitation. 

As to (4), Dobbins discloses that a customer defines a display filter in accordance with 
what the customer desires to view [0010 : subscriber can select premium content to view or 
receive specific content based on interests or relevance]. These preferences are stored as 
policies within the customer record, Dobbins does not expressly disclose whether the display 
filter is subject to editing by the service provider, Dobbins does teach that the personalization 
of the portal is controlled by the subscriber and that at the network provider's discretion, 
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some personalization controls can be administered. However, the network provider is not the 
same as a service provider. Szabo explicitly teaches that a subscriber's profile is private, 
accessible only to the subscriber [abstract : "physical and algorithmic controls over access to 
the personal profiles | column 41 «lines i'9» where : the user controls who has access to his 
user profile]. Thus, Szabo expressly discloses that the profile is not subject to editing by any 
other entity. 

Claim Rejections - 55 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art 
are such that the subject matter as a whole would have been obvious at the time the invention was made to a 
person having ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

5> Claims 21, 22, 26-28, 30, 32, 37-39, 40-43, 45, 47, 52 and 53 are rejected under 35 U.S.C § 
103(a) as being unpatentable over Dobbins et al, U.S Patent Publication No. 2002I0066033 
["Dobbins"], in view of Lim, in further view of Szabo, U.S Patent No. 7. 181.438, in further 
view of Rangarajan et al, U.S Patent No. 6.275.225, ["Rangarajan"]. 

6> As to claim 21, Dobbins discloses a method for filtering on-line service information 
provided through a management portal to a customer of customized network services 
provided by network resources of a service provider via a service provider network, 
comprising: 
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parsing a user configuration database for a security filter stored in a configuration 
record of the customer [Figure 12 | 0022-0024]; 

applying to said service provider network said security filter definable by the service 
provider in accordance with what the customer is allowed to view [0024] and said security 
filter specifying network resources allocated to that customer [0009, 0024, 0043 where : 
Dobbins discloses policies controllable by the administrator that determine which content 
and network resources a particular subscriber has access]; 

applying to said network resources a display filter definable by the customer, said 
display filter specifying network resources for which said on-line service information is 
desired by the customer [0023-0026, 0039-0043 : after applying the authentication policy, 
Dobbins' system applies the subscriber's profile to further refine which content and services 
that the user desires]; and 

executing at least one management information module to generate a portal display of 
on-line service information, wherein said at least one management information module 
operates only on those network resources of said service provider network which have not 
been excluded by said security filter and said display filter [0025, 0036, 0037 where : Dobbins' 
renderer delivers a portal containing the data and content refined by the user policies], and 
wherein the displayed on-line service information comprises network management 
information regarding the network resources not excluded by said security filter and display 
filter [0028]. 

Dobbins does disclose a service provider network, but does not to expressly disclose 
the service network or the resources are included in a partitioned network. Dobbins does not 
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expressly disclose that the display filter is not subject to editing by the service provider. 
Finally, Dobbins also does not disclose a module library. 

7> As to the partitioned network feature, Lim is directed towards a system enabling a 
service provider to manage its services partition its network resources into different 
networks associated with different customers [column i «lines 37-62» | column 20 «lines 61- 
62»]. Lim discloses network resources of a partitioned network allocated to a customer with 
the partitioned network including at least a portion of said service provider network [column 
25-29» I column 21 «lines 28 and 46-64» \ column 22 «lines 24-40»]. In other words Dobbins 
discloses an invention that enables management and monitoring of network resources. Lim 
discloses an invention that enables management and monitoring of network resources 
utilizing a partitioned network for each customer. Lim discloses that benefits of partitioning 
networks includes providing a more service-oriented view and enabling more efficient 
management of resources. 

Thus, it would have been obvious to one of ordinary skill in the art to modify 
Dobbins' management system to include the partitioned networks taught by Lim. As 
discussed, incorporating partitioned networks would provide an expected benefit to Dobbins 
by providing a service provider the ability to divide network resources and allocate them to 
customers. The combination of Dobbins and Lim discloses Applicant's invention in the 
manner claimed. 
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8> As to the display filter feature, Szabo is directed to a system providing personalized 
data access to users, through for example, portals [column 86 «lines i3-34» | column 90 «lines 
i2-23»]. Szabo discloses a display filter (analogous to a user's profile) is not subject to the 
control of the service provider [abstract : "physical and algorithmic controls over access to 
the personal profiles | column 41 «lines i-9» where : the user controls who has access to his 
user profile. This user profile is analogous to Applicant's display filter and Dobbins' 
subscriber profile]. It would have been obvious to one of ordinary skill in the art to 
incorporate Szabo's teachings into Dobbins, One would have been motivated to modify 
Dobbins' profile to be fnore secure as taught by Szabo to enhance the security over who has 
access to the profile's information. 

9> As to the module library feature, Rangarajan is directed to providing a customizable 
GUI to a user [abstract]. Further, Rangarajan discloses that a user can select from a set of 
features to configure the GUI, where such features are represented as modules on the GUI 
[Figure 5 «items 505, 509, 5ii» | Figure 9 «items 905, 907»]. The features are selected from a 
"library" or a set of features [column 2 «lines i'i3»]. Once a user has selected the features (or 
modules), the configuration is stored in the user's profile [column 8 «lines i2-33»]. Thus, 
Rangarajan discloses a module library as claimed by Applicant. 

Rangarajan's feature set library would improve Dobbins by placing all of Dobbins' 
services within a feature library to allow easier selection by the subscriber. Dobbins discloses 
parsing the customer's configuration record and parsing the record for a management 
information module [Figure 12 : disclosing network management information are stored in 
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the configuration record]. Dobbins does disclose that a user can select from a variety of 
available services [0024], some of these services including logging, billing and monitoring 
services [0028]. It would have been obvious to one of ordinary skill in the art to have 
modified Dobbins to include Rangarajan*s feature set into Dobbins' portal. Rangarajan 
enables a user to customize the functionality of the GUI to meet the user's needs [column i 
«lines 65-67»]. 

10 As to claim 22, Dobbins as modified by Lim, Szabo, and Rangarajan discloses a 
method wherein applying said security filter comprises applying: 

applying a customer sub-filter to provide an association of said corresponding 
customer and said network resources contained in said partitioned network allocated to the 
customer [Dobbins, 0009 : content access rule | see also Lim, column 9 «lines i8-27» | column 
10 «lines 24'42» : "...data associated with the customer are polled by the system.,,"], 

n> As to claim 23, Dobbins as modified by Lim and Szabo does not explicitly disclose an 
alarm module. Dobbins does disclose logging services that enable notifying administrators of 
a critical log message [0028]. Additionally, Rangarajan discloses an alarm module configured 
to display information regarding alarm conditions occurring in said non-excluded resources 
[Figure 5 «item 509» | column 5 «lines 50-53» | column 10 «lines 6-io» : wherein the devices 
correspond to network resources and clients are only able to work with resources that have 
been assigned to them (excluded resources)]. It would have been obvious to one of ordinary 
skill in the art to incorporate Rangarajan's alarm module into Dobbins' management system 
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to allow users to select nodes that would enable monitoring of alarm conditions in the 
network resources to which they only have access. One would have motivated to perform 
such an implementation enable users to more efficiently manage resources. 



I2> As to claim 24, Dobbins as modified by Lim and Szabo does not explicitly disclose a 
topology module configured to display at least a graphical representation of network 
elements and connections between said network elements included in said non-excluded 
network resources. However, such a feature was well known in the art at the time of 
Applicant's invention. 

Rangarajan discloses providing a topology module configured to display at least a 
graphical representation of network elements and connections between said network 
elements [Figure 9 «item 905» | column 6 «lines 27-36» | column 7 «lines 2i'24»]. 
Furthermore, Lim discloses resources that can only be utilized by customers with the 
property authority. It would have been obvious to one of ordinary skill in the art to 
incorporate Rangarajan's topology module into Dobbins' management system to allow users 
to more clearly see a map of the configuration of network resources to which they only have 
access in the network. One would have been motivated to perform such an implementation 
as such a map would allow users to more effectively manage the network resources. 

I3> As to claim 25, Dobbins as modified by Lim and Szabo does not explicitly disclose a 
network health module configured to display a status or health report of said non-excluded 
network resources. Dobbins does disclose monitoring services that enable an administrator to 
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"observe operating performance" [0028]. Additionally, Rangarajan discloses a network health 
module configured to display a status or health report of said non-excluded network 
resources [Figure 9 «item goyyy : "critical, major, minor.."]. It would have been obvious to one 
of ordinary skill in the art to incorporate Rangarajan's health module into Lim's data access 
system to allow users to keep track and remotely monitor network resources as needed. 

I4> As to claim 26, Dobbins discloses a method for filtering on-line service information 
presented through a management portal to a customer of customized network services 
provided by resources of a service provider network, comprising: 

storing, in a configuration database accessible by a service provider and not the 
customer, security filters each specifying network resources of a partitioned network 
allocated to a corresponding customer [ooio, 0017, 0023]; 

providing a plurality of modules each configured to provide a respective portal display 
of on-line service information [0021, 0024, 0027]; 

storing, in a filter library accessible to the customer, display filters each configured by 
the customer [0039-0043] to specify customer-selected network resources to which selected 
ones of said plurality of modules it to be applied [0010, 0017, 0023, 0036]; 

displaying a portal display of on-line service information generated from application 
of one of said plurality of modules to network resources resulting from application to the 
service provider network of a security filter corresponding to the customer and at least one 
said display filters [0009, 0010, 0017, 0023, 0036, 0037], and wherein the displayed on-line 
service information comprises network management information regarding the network 
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resources not excluded by said security filter and display filter [0028 : see response above for 
discussion], 

Dobbins does not expressly disclose partitioning the service provider network into a 
plurality of partitioned networks nor does he disclose allocating one of said partitioned 
networks to the customer, Dobbins does not expressly disclose that the display filter is not 
subject to editing by the service provider. Finally, Dobbins also does not disclose a module 
library. 

As to the partitioned network feature, see the rejection of claim 21 and the 
combination of Dobbins and Lim, above. As to the display filter feature, see the rejection of 
claim 21 and the combination of Dobbins and Szabo, above. As to the module library feature, 
see the rejection of claim 21 and the combination of Dobbins and Rangarajan, above, 

I5> As to claim 27, Dobbins as modified by Lim, Szabo, and Rangarajan discloses a 
method wherein applying said security filter comprises applying: 

applying a customer sub-filter to provide an association of said corresponding 
customer and said network resources contained in said partitioned network allocated to the 
customer [Dobbins, 0009 ; content access rule | see also Lim, column 9 «lines i8-27» | column 
10 «lines 24-42» : ",..data associated with the customer are polled by the system..,"]. 



i6> As to claim 28, Dobbins, as modified by Lim, Szabo and Rangarajan discloses a 
customer sub-filter that is configured to filter on at least one of a node level and interface 
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level of said service provider network [Dobbins, 0052, oiio : "subscriber's interface" | also see 
Lim, column 4 «lines 52-62» | column 5 «lines i-24» : see Lim's interfaces], 

I7> As to claim 30, Dobbins discloses specifying an internet protocol interface sub-filter of 
said security filter, said IP interface sub-filter configured to filter on an IP address of a 
network device [0022]. 

i8> As to claim 31, Dobbins and Lim do disclose utilizing sub-filters [see Dobbins, 
applying the security filter to the user, the applying a profile filter based on user preferences], 
but do not explicitly disclose a node selection sub-filter. Rangarajan discloses a node selection 
sub-filter of said display filter, said node selection sub-filter configured to filter on network 
nodes of the service provider network [column 6 «lines 27-33» | column 7 «lines io-i4»]. It 
would have been obvious to one of ordinary skill in the art to incorporate Rangarajan's node 
filtering functionality into Dobbins' management system to enable users to manage network 
devices through a user selected view of the nodes in the network. 

I9> As to claim 32, Dobbins discloses the method of claim 26 further comprising 
specifying an interface selection sub-filter of said display filter, said interface selection sub- 
filter configured to filter one of a set of at least one network interfaces [0052]. 



20> As to claim 33, Dobbins and Lim do not explicitly disclose an alarm module. 
Rangarajan discloses an alarm module configured to display alarm conditions in network 
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resources to which said alarm module is applied [Figure 5 «item 509» | column 10 «lines 6-io» 
: wherein the devices correspond to network resources]. It would have been obvious to one of 
ordinary skill in the art to incorporate Rangarajan's alarm module into Dobbins' 
management system to allow users to select nodes that would enable monitoring of alarm 
conditions in the network resources. One would have motivated to perform such an 
implementation enable users to more efficiently manage resources. 

2i> As to claim 34, Dobbins and Lim do not explicitly disclose an alarm sub-filter. 
Rangarajan discloses storing an alarm sub-filter of the display filter, said alarm sub-filter 
providing filtering capability of a display of alarm categories [column 6 «lines 27-36» | 
column 7 «lines 37-6i»: "selected fault list"]. It would have been obvious to one of ordinary 
skill in the art to incorporate Rangarajan's alarm sub-filter into Dobbins' management 
system to enable users to select specific faults that they wish to keep track of in their 
management system. 

22> As to claim 35, Dobbins and Lim do not explicitly disclose providing a topology 
module. Rangarajan discloses providing a topology module configured to display at least a 
graphical representation of network elements and connections between said network 
elements [Figure 9 «item 905» ] column 6 «lines 27-36» | column 7 «lines 2i-24»], It would 
have been obvious to one of ordinary skill in the art to incorporate Rangarajan's topology 
module into Dobbins' management system to allow users to more clearly see a map of the 
configuration of network resources in the network. One would have been motivated to 



Application/Control Number: Page 15 

09/843,760 

Art Unit: 2152 

perform such an implementation as such a map would allow users to more effectively 
manage the network resources. 

23> As to claim 36, Dobbins and Lim do not explicitly disclose storing a topology map 
sub-filter. Rangarajan discloses storing a topology map sub-filter of the display filter, said 
topology map sub-filter configured to identify which of said network elements and network 
element connections to include in said topology map [Figure 9 «item 905» | column 6 «lines 
27-36» I column 7 «lines 21-24 and 37-6i»]. It would have been obvious to one of ordinary skill 
in the art to incorporate Rangarajan's topology sub-filter into Dobbins* management system 
to allow users to control over what network devices are seen on a map of the network. One 
would have been motivated to perform such an implementation as such a map would allow 
users to more effectively manage the network resources. 

24> As to claim 37, Dobbins discloses providing a network health module configured to 
display a status or health report network resources to which said network health module is 
applied [0028]. 

2S> As to claim 38, Dobbins discloses storing a network health sub-filter of the display 
fiher, said network health sub-filter configured to identify which of said network elements to 
monitor for said status and health report [0028, 0133]. 
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26> As to claim 39, Dobbins discloses invoking said security filter by parsing a customer 
record in said user configuration database [0027, 0028]. 

27> As to claim 40, Dobbins discloses invoking said display filter by invoking said 
selected module [0053]. 

28> As to claims 41-43, 45, 47, 52 and 53, as they are merely systems that implement the 
steps of the method of claims 26-28, 30, 32, 37 and 38, they do not teach or further define over 
the claimed limitations. Therefore, claims 41-43, 45, 47, 52 and 53 are rejected for the same 
reasons as set forth for claims 26-28, 30, 32, 37 and 38, supra. 

29> As to claims 46 and 48-51, as they are merely systems that implement the steps of the 
method of claims 31 and 33-36, they do not teach or further define over the claimed 
limitations. Therefore, claims 46 and 48-51 are rejected for the same reasons as set forth for 
claims 31 and 33-36, supra. 

30 Claims 29 and 44 are rejected under 35 U.S.C § 103(a) as being unpatentable over 
Dobbins, Lim, Szabo, and Rangarajan, in further view of Teijido et al, U.S Patent No, 
2002I0053020 ["Teijido"]. 



3i> As to claim 29, Dobbins as modified by Lim, Szabo, and Rangarajan does not 
explicitly disclose specifying an internet protocol host sub-filter of said security filter, said IP 
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host sub-filter configured to filter on a network name of a network device. Teijido discloses 
an internet protocol host sub-filter of said security filter, said IP host sub-filter configured to 
filter on a network name of a network device [0049, 0070 : "...limit access to only a 
predefined specific set of client machines."; "...host id"]. It would have been obvious to one 
of ordinary skill in the art to incorporate Teijido's host sub-filter into Dobbins' management 
system to provide a level of security in accessing and viewing network resources. Such an 
implementation would ensure that the data can be tailored to a specific set of client 
machines, 

32> As to claim 44, as it does not teach or further define over the previously claimed 
limitations, it is rejected for the reasons set forth for claim 29, supra. 

Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR i, 136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR i, 136(a) will be calculated from the mailing date of the 
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advisory action. In no event, however, will the statutory period for reply expire later than 
SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Dohm Chankong whose telephone number is 571,272.3942. 
The examiner can normally be reached on Monday-Friday [8:30 AM to 4:30 PM]. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Bunjob Jaroenchonwanit can be reached on 571,272.3913. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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